Open-source control layer for AI agents: checks every tool call against your rules, holds risky ones for human approval, and keeps a tamper-evident audit trail.
Squidbrake dashboard — approvals pending
1 / 2Overview
What is Squidbrake?
Brakes for your AI agents.
Squidbrake is a free, open-source change-control layer for AI agents. Every command, file edit, and MCP tool call goes through Squidbrake first: safe ones run on their own, dangerous ones are blocked, and risky ones wait until a person approves them.
It connects to the agents you already use - Claude Code, Cursor, Codex, Gemini CLI, VS Code Copilot, Antigravity - plus any MCP server, with one command that backs up your configs first. Everything lands in a tamper-evident audit trail with per-agent reports, CSV export, and phone or Slack approvals.
It runs on your laptop or your own server, and your data never leaves it. Install with pipx and connect every agent on the machine in one step.
Platforms and languages
Squidbrake Availability
Platforms
Languages
Capabilities
Squidbrake Key Features
Rules, not vibes
A rules.yaml file decides what runs by itself, what is blocked, and what waits for a person. No LLM sits in the decision path.
Human approval anywhere
Risky actions wait for a person to approve or reject them from the dashboard, a phone, or Slack, with the full context of what led to the request.
Tamper-evident audit trail
Every agent action is recorded in a hash-chained log an auditor can check, with weekly summaries and evidence packs; destructive changes keep an undo.
Emergency stop
Halt every agent instantly until an admin resumes. It fails closed, so guarded tools simply do not run while Squidbrake is down.
One policy for every agent
A single command connects Claude Code, Cursor, Codex, Gemini CLI, VS Code Copilot, Antigravity, and any MCP app; every agent config is backed up before changes.
Best for
Who uses Squidbrake?
Teams running AI coding agents
Put human approval and a tamper-evident audit trail in front of risky agent actions
Solo developers using Claude Code or Cursor
Stop an agent from running destructive commands or sending money without a second pair of eyes
Plans and access
Squidbrake Pricing
Free
Free and open source (Apache 2.0).
Common questions
Squidbrake FAQs
Which agents does Squidbrake work with?
Claude Code, Cursor, Codex, Gemini CLI, VS Code Copilot, Antigravity, and any MCP app. One command connects them all.
What happens if Squidbrake goes down?
It fails closed: guarded tools do not run until Squidbrake is back up.
Where does my data go?
Nowhere. It runs on your laptop or your own server, and your data never leaves it.
Is it really free?
Yes. It is free and open source under the Apache 2.0 license.
Reviews
See what the community thinks and share your experience.
—
Based on 0 ratings
Rating distribution
Community reviews
No reviews
No written reviews yet.
